Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e38312e302f32342d3234203d3e203137343531.roa
File:                     3131382e39392e38312e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          sGl0EtX70ETweUzK/4fxCIMTDbnzbS5E0RrUiJ1CqtA=
Subject key identifier:   CB:6B:75:1D:BE:D5:36:91:F8:8E:4B:41:10:66:9F:24:F3:86:C0:82
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       5A45B7ABE3DD63ABEF1B787E0BBF6C806A45D572
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e38312e302f32342d3234203d3e203137343531.roa
Signing time:             Sun 19 Dec 2021 14:00:12 +0000
ROA not before:           Sun 19 Dec 2021 13:55:12 +0000
ROA not after:            Mon 19 Dec 2022 14:00:12 +0000
asID:                     17451
IP address blocks:        118.99.81.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:45:b7:ab:e3:dd:63:ab:ef:1b:78:7e:0b:bf:6c:80:6a:45:d5:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Dec 19 13:55:12 2021 GMT
            Not After : Dec 19 14:00:12 2022 GMT
        Subject: CN=3082010A0282010100BC5E97E26C56E054D0BB6644699102854997C7190E34F212804EFA16F9D21DCD09872AD447B611EF08D7B077B44C3551876B4032D2E489DA91BC680B4A62EC3A4807F1AB729E5AC8F287789FFEEBED5C67799720C8040341113167D72C6CBB7460D3C1E5F99549094FA820391F9B1D6FBE7D1029BD63115DA1EAF9CA0907F25CB9F2A6ABEB3FA6C3DE3B61A4280E1B61551E5DCB5B40378E131F60C1B5A257067E1C4E673514E75E25FE5F22312C4575E757B816A09116AC85AE1D273838D67D2646CC1B5D1520B51233E31A820EA00CB956F0DB3DBEEF4F0D056DD932864DA0F88CAFE0CCFCFCE39108727C11BD3260C81E575A1BD51455EE1C83C48BA694690203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5e:97:e2:6c:56:e0:54:d0:bb:66:44:69:91:
                    02:85:49:97:c7:19:0e:34:f2:12:80:4e:fa:16:f9:
                    d2:1d:cd:09:87:2a:d4:47:b6:11:ef:08:d7:b0:77:
                    b4:4c:35:51:87:6b:40:32:d2:e4:89:da:91:bc:68:
                    0b:4a:62:ec:3a:48:07:f1:ab:72:9e:5a:c8:f2:87:
                    78:9f:fe:eb:ed:5c:67:79:97:20:c8:04:03:41:11:
                    31:67:d7:2c:6c:bb:74:60:d3:c1:e5:f9:95:49:09:
                    4f:a8:20:39:1f:9b:1d:6f:be:7d:10:29:bd:63:11:
                    5d:a1:ea:f9:ca:09:07:f2:5c:b9:f2:a6:ab:eb:3f:
                    a6:c3:de:3b:61:a4:28:0e:1b:61:55:1e:5d:cb:5b:
                    40:37:8e:13:1f:60:c1:b5:a2:57:06:7e:1c:4e:67:
                    35:14:e7:5e:25:fe:5f:22:31:2c:45:75:e7:57:b8:
                    16:a0:91:16:ac:85:ae:1d:27:38:38:d6:7d:26:46:
                    cc:1b:5d:15:20:b5:12:33:e3:1a:82:0e:a0:0c:b9:
                    56:f0:db:3d:be:ef:4f:0d:05:6d:d9:32:86:4d:a0:
                    f8:8c:af:e0:cc:fc:fc:e3:91:08:72:7c:11:bd:32:
                    60:c8:1e:57:5a:1b:d5:14:55:ee:1c:83:c4:8b:a6:
                    94:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6B:75:1D:BE:D5:36:91:F8:8E:4B:41:10:66:9F:24:F3:86:C0:82
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e38312e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.99.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:8a:5e:51:2c:92:d7:b6:89:c0:81:d7:28:24:08:03:d7:4a:
         8e:72:25:a5:ea:e7:20:90:0f:5c:a4:bc:93:c1:44:47:a0:54:
         29:8a:ab:e7:69:0b:7a:ac:2e:53:6c:e8:8d:14:59:77:f8:38:
         9b:e9:68:07:b9:f6:07:0f:0e:7a:11:01:45:f3:4f:de:3f:1c:
         1a:a1:ff:ce:65:b2:8d:c5:b3:a7:fc:93:0b:40:e0:26:a7:2c:
         58:f8:6e:dc:fe:0d:74:99:68:71:c2:ef:28:9f:c2:2b:fc:ee:
         7d:c9:d3:1c:6c:4a:ea:d1:6c:c3:ed:3d:a3:eb:7c:00:5c:5f:
         b6:77:26:e4:aa:f4:b6:32:be:c0:45:03:21:88:a5:61:bb:a8:
         bf:8d:b5:e9:50:fa:b4:0f:4a:60:01:16:b0:22:21:8d:41:61:
         ce:6f:9c:a4:f0:69:a6:70:dd:6f:81:f4:8b:7e:62:fb:c9:3c:
         73:3e:19:c7:a0:48:d3:ee:5f:44:41:a5:34:a5:6f:79:5a:33:
         6a:eb:30:bc:54:16:2f:62:fd:9e:09:c5:be:48:69:36:cb:7f:
         04:ab:3c:0a:8d:c6:68:29:dd:35:9a:8c:d5:be:66:f5:81:13:
         5d:16:53:53:38:87:39:fe:bf:e0:df:43:e0:49:85:14:68:50:
         49:8e:de:4a
-----BEGIN CERTIFICATE-----
MIIHIjCCBgqgAwIBAgIUWkW3q+PdY6vvG3h+C79sgGpF1XIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTEyMTkxMzU1MTJaFw0yMjEyMTkxNDAwMTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkM1RTk3RTI2QzU2RTA1NEQw
QkI2NjQ0Njk5MTAyODU0OTk3QzcxOTBFMzRGMjEyODA0RUZBMTZGOUQyMURDRDA5
ODcyQUQ0NDdCNjExRUYwOEQ3QjA3N0I0NEMzNTUxODc2QjQwMzJEMkU0ODlEQTkx
QkM2ODBCNEE2MkVDM0E0ODA3RjFBQjcyOUU1QUM4RjI4Nzc4OUZGRUVCRUQ1QzY3
Nzk5NzIwQzgwNDAzNDExMTMxNjdENzJDNkNCQjc0NjBEM0MxRTVGOTk1NDkwOTRG
QTgyMDM5MUY5QjFENkZCRTdEMTAyOUJENjMxMTVEQTFFQUY5Q0EwOTA3RjI1Q0I5
RjJBNkFCRUIzRkE2QzNERTNCNjFBNDI4MEUxQjYxNTUxRTVEQ0I1QjQwMzc4RTEz
MUY2MEMxQjVBMjU3MDY3RTFDNEU2NzM1MTRFNzVFMjVGRTVGMjIzMTJDNDU3NUU3
NTdCODE2QTA5MTE2QUM4NUFFMUQyNzM4MzhENjdEMjY0NkNDMUI1RDE1MjBCNTEy
MzNFMzFBODIwRUEwMENCOTU2RjBEQjNEQkVFRjRGMEQwNTZERDkzMjg2NERBMEY4
OENBRkUwQ0NGQ0ZDRTM5MTA4NzI3QzExQkQzMjYwQzgxRTU3NUExQkQ1MTQ1NUVF
MUM4M0M0OEJBNjk0NjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvF6X4mxW4FTQu2ZEaZEChUmXxxkONPISgE76FvnSHc0JhyrUR7YR
7wjXsHe0TDVRh2tAMtLkidqRvGgLSmLsOkgH8atynlrI8od4n/7r7VxneZcgyAQD
QRExZ9csbLt0YNPB5fmVSQlPqCA5H5sdb759ECm9YxFdoer5ygkH8ly58qar6z+m
w947YaQoDhthVR5dy1tAN44TH2DBtaJXBn4cTmc1FOdeJf5fIjEsRXXnV7gWoJEW
rIWuHSc4ONZ9JkbMG10VILUSM+Magg6gDLlW8Ns9vu9PDQVt2TKGTaD4jK/gzPz8
45EIcnwRvTJgyB5XWhvVFFXuHIPEi6aUaQIDAQABo4ICMDCCAiwwHQYDVR0OBBYE
FMtrdR2+1TaR+I5LQRBmnyTzhsCCMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGgBggrBgEFBQcB
CwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTMxMzgyZTM5MzkyZTM4MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM3MzQz
NTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAdmNRMA0GCSqGSIb3DQEBCwUAA4IBAQAuil5RLJLXtonA
gdcoJAgD10qOciWl6ucgkA9cpLyTwURHoFQpiqvnaQt6rC5TbOiNFFl3+Dib6WgH
ufYHDw56EQFF80/ePxwaof/OZbKNxbOn/JMLQOAmpyxY+G7c/g10mWhxwu8on8Ir
/O59ydMcbErq0WzD7T2j63wAXF+2dybkqvS2Mr7ARQMhiKVhu6i/jbXpUPq0D0pg
ARawIiGNQWHOb5yk8GmmcN1vgfSLfmL7yTxzPhnHoEjT7l9EQaU0pW95WjNq6zC8
VBYvYv2eCcW+SGk2y38EqzwKjcZoKd01mozVvmb1gRNdFlNTOIc5/r/g30PgSYUU
aFBJjt5K
-----END CERTIFICATE-----